SANtricity 11 Manuals (CA08872-010)

Local user roles
Authentication is managed through RBAC capabilities. Local user roles include pre-defined users and roles with specific access permissions. Administrators can use these local user roles as the single method of authentication, or use them in combination with a directory service. No configuration is necessary, other than setting passwords for users.

Directory services
Authentication is managed through an LDAP (Lightweight Directory Access Protocol) server and directory service, such as Microsoft’s Active Directory. An administrator connects to the LDAP server, and then maps the LDAP users to the local user roles.

SAML
Authentication is managed through an Identity Provider (IdP) using the Security Assertion Markup Language (SAML) 2.0. An administrator establishes communication between the IdP system and the storage system, and then maps IdP users to the local user roles embedded in the storage system.

Authenticates the user name and password against the user account.

Determines the user’s permissions based on the assigned roles.

Provides the user with access to functions in the user interface.

Displays the user name in the top banner.